Aller au contenu
en Se connecter
3.7 Faible

CVE-2020-2900 Vulnerability in the Oracle GraalVM Enterprise Edition product of Oracle GraalVM (component: Tools)

Description

Vulnerability in the Oracle GraalVM Enterprise Edition product of Oracle GraalVM (component: Tools). Supported versions that are affected are 19.3.1 and 20.0.0. Difficult to exploit vulnerability allows low privileged attacker with network access via multiple protocols to compromise Oracle GraalVM Enterprise Edition. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle GraalVM Enterprise Edition accessible data as well as unauthorized read access to a subset of Oracle GraalVM Enterprise Edition accessible data. CVSS 3.0 Base Score 3.7 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:L/UI:R/S:U/C:L/I:L/A:N).

Produits et versions touchés

Produit Versions touchées Corrigé en
GraalVM Enterprise Edition 20.0.0 Pas de correctif indiqué
GraalVM Enterprise Edition 19.3.1 Pas de correctif indiqué

Références

Chronologie

  1. Publiée
  2. Dernière modification

Autres CVE de GraalVM Enterprise Edition

Les 16 CVE de GraalVM Enterprise Edition →
CVE-2024-20955 Vulnerability in the Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component:… 3.7 Faible CVE-2023-22091 Vulnerability in the Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component:… 4.8 Moyenne CVE-2023-22051 Vulnerability in the Oracle GraalVM Enterprise Edition, Oracle GraalVM for JDK product of Oracle Java SE (component:… 3.7 Faible CVE-2023-21986 Vulnerability in the Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Native Image) 5.7 Moyenne
Suivre cette CVE